This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/NuqvGLGVW54T2_CK4Y8l2k93wFg.roa File: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (raw, json) Hash identifier: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA= Subject key identifier: 36:EA:AF:18:B1:95:5B:9E:13:DB:F0:8A:E1:8F:25:DA:4F:77:C0:58 Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab Certificate serial: 019B78351F4FBBB76863A71F83E10EB36AFC Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/NuqvGLGVW54T2_CK4Y8l2k93wFg.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 194.39.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1f:4f:bb:b7:68:63:a7:1f:83:e1:0e:b3:6a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36eaaf18b1955b9e13dbf08ae18f25da4f77c058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:f6:3b:c0:d5:29:9a:d6:ac:08:6f:d5:13: ea:1e:3e:bd:e0:df:66:69:ae:75:03:58:cd:e2:2f: be:f3:9c:62:a2:52:e7:a9:e2:c3:77:26:2b:33:c2: 41:3e:d3:ac:f6:46:75:9d:67:66:60:5e:ab:ce:f5: 2d:d4:a5:48:97:c4:a2:50:ff:61:eb:18:70:a0:d5: f9:ad:df:90:c3:ec:96:4e:13:41:25:62:e2:1d:76: bb:61:ec:96:f2:c7:27:d9:d9:26:a5:8b:5b:e2:d3: 75:47:9b:9a:10:41:a3:2e:57:94:fb:26:d0:fa:30: 23:28:43:ff:b8:86:8e:9a:21:55:0d:b5:61:c1:b7: eb:91:b8:0a:f1:62:64:49:48:87:f7:9f:7a:82:99: ca:be:4c:ba:db:7a:db:c6:bb:a6:9d:5d:b8:71:25: 79:89:c8:0d:8a:27:2f:35:9f:39:9b:3f:c4:e6:e0: 26:2f:32:05:45:01:60:82:54:e8:5d:c4:48:35:54: 09:2e:ff:d2:49:13:61:f6:25:fb:82:27:ce:21:c4: 2f:35:af:7a:2b:00:e8:94:a1:17:af:be:a9:30:22: 96:0d:5b:37:3a:c4:c0:5e:f3:16:28:a8:d0:4b:07: 5d:25:9b:bf:b9:ec:9f:0d:e8:9b:8f:27:a3:fc:24: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:AF:18:B1:95:5B:9E:13:DB:F0:8A:E1:8F:25:DA:4F:77:C0:58 X509v3 Authority Key Identifier: keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/NuqvGLGVW54T2_CK4Y8l2k93wFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.180.0/22 Signature Algorithm: sha256WithRSAEncryption 05:5f:a6:f6:97:2c:c8:72:f4:5d:56:46:58:48:72:df:b7:fb: df:92:e9:e6:8d:12:84:85:87:1b:76:12:a9:f4:e7:39:16:61: 13:89:7e:b0:7f:89:36:50:2e:47:d6:81:a4:0e:ee:76:f0:b3: 39:64:cf:d7:68:75:d2:72:d5:cc:d8:bc:53:cb:0e:e4:c0:41: 11:56:ac:45:5a:be:5e:20:c2:21:37:b5:5d:98:cc:83:46:a1: f5:f5:e7:0d:a3:e5:df:61:bc:e1:ef:d8:96:03:6e:6f:6e:4d: a0:a4:a9:c7:fc:a5:f1:8d:fd:90:a5:67:8e:37:4b:80:9c:7e: aa:cc:3e:cb:24:f3:de:e2:d2:35:60:56:62:be:02:26:ed:39: 98:42:16:02:92:0d:07:06:e7:dd:e0:f0:76:c5:10:5e:da:66: 43:22:d0:26:9e:c2:8b:5f:46:3b:d3:1d:e7:bf:5b:9c:3a:d1: 10:4d:7e:57:f5:2f:92:44:d8:1f:24:49:e3:8b:a4:f9:ca:ee: df:eb:93:82:f7:b6:5a:98:60:62:7a:f8:0b:57:ec:a6:54:b1: 30:05:36:c8:65:b0:48:00:60:c6:48:2d:9e:1c:9c:3c:eb:56: 15:fd:80:53:fe:f9:77:87:fd:41:1b:f4:1b:97:59:72:23:7e: 43:0c:53:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NR9Pu7doY6cfg+EOs2r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy NmNlYWIwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmVhYWYxOGIxOTU1YjllMTNkYmYwOGFlMThmMjVkYTRmNzdjMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt32O8DVKZrWrAhv1RPqHj694N9m aa51A1jN4i++85xiolLnqeLDdyYrM8JBPtOs9kZ1nWdmYF6rzvUt1KVIl8SiUP9h 6xhwoNX5rd+Qw+yWThNBJWLiHXa7YeyW8scn2dkmpYtb4tN1R5uaEEGjLleU+ybQ +jAjKEP/uIaOmiFVDbVhwbfrkbgK8WJkSUiH9596gpnKvky623rbxrumnV24cSV5 icgNiicvNZ85mz/E5uAmLzIFRQFgglToXcRINVQJLv/SSRNh9iX7gifOIcQvNa96 KwDolKEXr76pMCKWDVs3OsTAXvMWKKjQSwddJZu/ueyfDeibjyej/CRrJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbqrxixlVueE9vwiuGPJdpPd8BYMB8GA1UdIwQY MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt NmQ3NTUwNTJiYjI0LzEvTnVxdkdMR1ZXNTRUMl9DSzRZOGwyazkzd0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0 LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwie0MA0G CSqGSIb3DQEBCwUAA4IBAQAFX6b2lyzIcvRdVkZYSHLft/vfkunmjRKEhYcbdhKp 9Oc5FmETiX6wf4k2UC5H1oGkDu528LM5ZM/XaHXSctXM2LxTyw7kwEERVqxFWr5e IMIhN7VdmMyDRqH19ecNo+XfYbzh79iWA25vbk2gpKnH/KXxjf2QpWeON0uAnH6q zD7LJPPe4tI1YFZivgIm7TmYQhYCkg0HBufd4PB2xRBe2mZDItAmnsKLX0Y70x3n v1ucOtEQTX5X9S+SRNgfJEnji6T5yu7f65OC97ZamGBievgLV+ymVLEwBTbIZbBI AGDGSC2eHJw861YV/YBT/vl3h/1BG/Qbl1lyI35DDFPE -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:39 2026 by rpki-client